$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: acy+XhvvL5GqnrPwN6HIJHej3OYlbXpw1yU9v9dnouU= Subject key identifier: E6:A0:00:62:04:6F:9D:96:2D:20:E8:49:62:FB:4B:88:8E:51:C0:6E Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 08D73A376456220645241DA4214CD01ED360CB6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: 0D Signing time: Mon 27 Apr 2026 01:33:38 +0000 Manifest this update: Mon 27 Apr 2026 01:28:38 +0000 Manifest next update: Tue 28 Apr 2026 05:16:38 +0000 Files and hashes: 1: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: 3JvKL+d1hc9mtUYhlbDfdY0PVe3PYLyeT0TvGpRhHfw=) 2: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 3: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 4: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 5: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 6: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) 7: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 05:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d7:3a:37:64:56:22:06:45:24:1d:a4:21:4c:d0:1e:d3:60:cb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Apr 27 01:28:38 2026 GMT Not After : Apr 28 05:16:38 2026 GMT Subject: CN=E6A00062046F9D962D20E84962FB4B888E51C06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:96:f4:4a:1a:a9:d4:73:a3:ef:fb:41:07: 67:1b:3b:2e:ae:55:35:ad:1e:db:60:eb:4e:30:7c: e5:04:54:87:db:98:fc:0f:60:7e:0c:d5:0b:66:22: 07:c8:b2:f4:2f:13:13:23:ea:4e:f9:d6:82:d4:31: ad:3f:f3:a1:0a:8c:95:c8:f4:53:63:99:c5:09:67: f5:e3:e5:76:45:20:51:0a:53:84:fb:8b:1e:a2:80: 70:4d:e2:97:4f:f5:cb:0a:c2:c2:d5:33:33:49:d1: de:75:07:2a:04:0e:44:f0:59:d7:a1:20:9d:2e:08: ee:20:32:02:5e:f8:8e:5f:20:b1:38:71:bb:a8:1d: ef:f0:a6:2b:b8:c6:f3:f6:45:3b:53:15:e4:25:e7: 2e:a8:28:06:b0:4d:fc:91:34:b6:82:7d:19:2a:08: 85:d2:34:8d:c0:a6:15:af:c0:42:35:6a:b0:0e:2e: ff:0b:da:a7:66:e6:86:44:54:65:33:50:84:8b:3a: a4:33:8a:6d:79:94:ec:61:2f:f3:85:f0:22:4d:f6: 70:6a:38:7c:36:4a:06:0a:f0:e9:8d:22:9a:57:64: 02:88:0d:2f:0f:ac:60:e5:6e:54:c7:70:e2:af:b1: 0d:fd:f2:c2:45:e7:f2:2b:14:a1:ce:da:09:a3:6a: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A0:00:62:04:6F:9D:96:2D:20:E8:49:62:FB:4B:88:8E:51:C0:6E X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f3:b2:14:37:b7:44:d8:6f:0d:9f:e9:7e:46:1e:24:80:d6: b6:36:fa:e8:7b:52:01:7a:a3:1b:a7:aa:15:eb:64:29:17:e1: 8e:31:0b:59:bf:c0:e7:ca:e9:a5:49:63:0b:95:db:ea:0c:08: c3:c1:f1:f0:37:5a:4c:b6:bf:5c:a5:60:17:97:f4:fd:34:a6: e8:4b:71:2c:81:0c:83:f6:c1:16:f4:3b:24:b2:e9:99:2e:88: d9:46:fa:e4:73:e9:84:e3:f4:5c:2e:9d:87:a4:d6:ce:0b:ca: dd:71:bc:15:cc:b9:4c:ae:96:cd:95:c0:1d:7e:ff:a7:9c:37: 97:6c:9c:f7:c8:1c:31:cc:c5:03:7b:0a:66:20:70:da:fb:11: a1:03:27:f8:c7:20:b8:19:25:d2:4a:80:d3:4e:4f:cf:23:9f: 52:0b:02:fc:43:52:fa:f9:e0:c4:f5:0f:a0:6c:b7:53:34:5a: 3a:ab:14:1a:e6:71:58:2a:05:56:24:86:d4:cb:1d:dc:66:99: 5b:cf:2a:ec:ea:42:d7:c0:ac:e8:e3:db:a0:b2:e8:4b:a7:9b: 45:66:8f:bc:03:91:19:4b:36:ba:1a:83:a6:d6:f1:61:f9:72: 45:2a:c2:ad:f1:df:dc:ab:20:7a:71:40:d8:12:b4:af:21:d1: 57:7c:48:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCNc6N2RWIgZFJB2kIUzQHtNgy20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA0MjcwMTI4MzhaFw0yNjA0MjgwNTE2MzhaMDMxMTAvBgNV BAMTKEU2QTAwMDYyMDQ2RjlEOTYyRDIwRTg0OTYyRkI0Qjg4OEU1MUMwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC805b0Shqp1HOj7/tBB2cbOy6u VTWtHttg604wfOUEVIfbmPwPYH4M1QtmIgfIsvQvExMj6k751oLUMa0/86EKjJXI 9FNjmcUJZ/Xj5XZFIFEKU4T7ix6igHBN4pdP9csKwsLVMzNJ0d51ByoEDkTwWdeh IJ0uCO4gMgJe+I5fILE4cbuoHe/wpiu4xvP2RTtTFeQl5y6oKAawTfyRNLaCfRkq CIXSNI3AphWvwEI1arAOLv8L2qdm5oZEVGUzUISLOqQzim15lOxhL/OF8CJN9nBq OHw2SgYK8OmNIppXZAKIDS8PrGDlblTHcOKvsQ398sJF5/IrFKHO2gmjaufHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5qAAYgRvnZYtIOhJYvtLiI5RwG4wHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifOyFDe3RNhv DZ/pfkYeJIDWtjb66HtSAXqjG6eqFetkKRfhjjELWb/A58rppUljC5Xb6gwIw8Hx 8DdaTLa/XKVgF5f0/TSm6EtxLIEMg/bBFvQ7JLLpmS6I2Ub65HPphOP0XC6dh6TW zgvK3XG8Fcy5TK6WzZXAHX7/p5w3l2yc98gcMczFA3sKZiBw2vsRoQMn+McguBkl 0kqA005PzyOfUgsC/ENS+vngxPUPoGy3UzRaOqsUGuZxWCoFViSG1Msd3GaZW88q 7OpC18Cs6OPboLLoS6ebRWaPvAORGUs2uhqDptbxYflyRSrCrfHf3KsgenFA2BK0 ryHRV3xIag== -----END CERTIFICATE-----Generated at Mon Apr 27 09:37:11 2026 by rpki-client